CVE-2015-8952: The mbcache feature in the ext2 and ext4 filesystem implementations in the Linux kernel before 4.6 mishandl...

Security readout for executives and security teams

CVE-2015-8952 is a local denial-of-service issue in older Linux kernels. On ext2 or ext4 filesystems, heavy extended-attribute use can trigger mbcache lock contention and soft lockups. Business impact is availability loss on affected storage or file-sharing systems, not confirmed remote compromise. Exposure is most likely on Linux hosts running pre-4.6 or unpatched vendor kernels with ext2/ext4 filesystems and xattr-heavy workloads. Ceph and Samba environments are specifically cited. Systems without local users, containers, or services able to exercise filesystem attributes have lower practical exposure. Treat as a targeted availability risk for older Linux storage and file-sharing systems. Prioritize patch verification on business-critical Ceph or Samba hosts, but it is not supported as an internet-wormable or actively exploited issue by the supplied sources. Mitigation focus: Apply vendor kernel updates that address CVE-2015-8952.; Prioritize Ceph, Samba, and shared-storage hosts using ext2 or ext4.; Move unsupported kernels to maintained vendor releases..

Prepared

Jun 13, 2026, 13:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.